MS-100 Regulatory Frameworks & Compliance 3

Question 1

Which Microsoft Purview solution monitors Teams, Exchange, and Yammer communications for policy violations such as harassment or conflicts of interest?

Accepted Answer

Communication Compliance

Answer

Communication Compliance reviews communications in Microsoft 365 for regulatory and policy violations using machine learning classifiers and customizable policy templates.

Question 2

A financial services firm must prevent M&A deal team members from communicating with trading desk employees. Which Microsoft Purview feature enforces this separation?

Accepted Answer

Information Barriers

Answer

Information Barriers restrict communications and collaboration between defined groups in Microsoft 365 services including Teams, SharePoint, and OneDrive.

Question 3

Your organization is assessed against NIST SP 800-53 controls. Where in Microsoft 365 can you find a pre-built assessment mapped to these controls?

Accepted Answer

Compliance Manager built-in assessments

Answer

Compliance Manager includes pre-built assessments for NIST SP 800-53 that map Microsoft controls and customer improvement actions to specific requirements.

Question 4

Under GDPR Article 33, an organization must notify the supervisory authority within 72 hours of discovering a personal data breach. Which Microsoft 365 tool helps detect such breaches?

Accepted Answer

Microsoft Defender for Cloud Apps anomaly detection alerts

Answer

Defender for Cloud Apps detects anomalous data access and exfiltration patterns that may indicate a personal data breach requiring GDPR Article 33 notification.

Question 5

A healthcare organization wants to classify documents containing patient record numbers automatically. Which Microsoft Purview capability uses pre-trained models to identify this sensitive content type?

Accepted Answer

Built-in sensitive information types

Answer

Built-in sensitive information types use pattern matching and checksums to detect regulated data like patient IDs, SSNs, and credit card numbers without custom configuration.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Regulatory Frameworks & Compliance 3